Commit Graph

294 Commits

Author SHA256 Message Date
10bb24e527 - (bsc#1214691, CVE-2022-48566) Add
CVE-2022-48566-compare_digest-more-constant.patch to make
  compare_digest more constant-time.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=385
2023-09-16 16:30:00 +00:00
fe93386c91 - (bsc#1214685, CVE-2022-48565) Add
CVE-2022-48565-plistlib-XML-vulns.patch (from
  gh#python/cpython#86217) reject XML entity declarations in
  plist files.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=384
2023-09-14 21:54:10 +00:00
0012499f47 Accepting request 1110536 from home:dgarcia:branches:devel:languages:python:Factory
- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)

OBS-URL: https://build.opensuse.org/request/show/1110536
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=382
2023-09-13 12:22:49 +00:00
95848c308a Fix patches
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=380
2023-08-12 16:42:26 +00:00
1912a70570 Fix patch.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=379
2023-08-12 13:52:03 +00:00
400f3dade2 Fix patches
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=378
2023-08-12 07:07:32 +00:00
e3016c2d79 Fix patches
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=377
2023-08-12 05:43:19 +00:00
2cdb3378ec Fix patches.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=376
2023-08-11 23:13:45 +00:00
d30510674e Fix patches
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=375
2023-08-11 20:15:40 +00:00
4a7548ec68 - IT MEANS THAT bsc#1210638 STILL HAS NOT BEEN FIXED!
- Add Revert-gh105127-left-tests.patch (gh#python/cpython!106941)
  partially reverting CVE-2023-27043-email-parsing-errors.patch,
  because of the regression in gh#python/cpython#106669.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=374
2023-08-11 18:04:06 +00:00
8e5f3115ae Preliminary WIP state
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=373
2023-07-13 21:50:15 +00:00
4afae2e051 Update SPEC
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=370
2023-06-07 18:49:34 +00:00
3095c8247c - Fix the application of the python-2.7.17-switch-off-failing-SSL-tests.patch.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=369
2023-06-07 15:44:38 +00:00
3c4cd74d92 Run pre_checkin.sh
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=368
2023-06-07 10:42:55 +00:00
b0f5b812cb Fix application of the patch 57
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=367
2023-06-07 10:04:43 +00:00
55461311b5 Remove silly comment in the changelog
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=366
2023-06-06 10:29:31 +00:00
6f83c920d0 No nis.so on Tumbleweed
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=365
2023-06-03 09:15:51 +00:00
78634bafca Accepting request 1089783 from home:Andreas_Schwab:Factory
- python-2.7.5-multilib.patch: Update for riscv64
- Don't fail if _ctypes or dl extension was not built

OBS-URL: https://build.opensuse.org/request/show/1089783
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=364
2023-05-30 11:53:04 +00:00
352049f843 Correction
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=363
2023-05-29 19:31:36 +00:00
1108b564fe - The condition around libnsl-devel BuildRequires is NOT
switching off NIS support on SLE < 15, support for NIS used to
  be in the glibc itself. Partial revert of sr#1061583.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=362
2023-05-29 18:52:32 +00:00
c0fecb5ffe - Add PygmentsBridge-trime_doctest_flags.patch to allow build of
the documentation even with the current Sphinx. (SUSE-ONLY
  PATCH, DO NOT SEND UPSTREAM!)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=360
2023-05-24 20:56:16 +00:00
cd31207dec Forgot to run pre_checkin.sh
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=359
2023-05-24 18:54:17 +00:00
e4a0f3dd73 Fix libnsl-devel condition per review request.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=358
2023-05-24 18:46:49 +00:00
74c4b15a95 Accepting request 1085043 from home:dimstar:Factory
- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.

OBS-URL: https://build.opensuse.org/request/show/1085043
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=356
2023-05-05 13:32:20 +00:00
f552945ee9 - Why in the world we download from HTTP?
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=355
2023-04-30 18:18:35 +00:00
b5b8f18a14 Run pre_checkin.sh
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=353
2023-03-29 11:48:36 +00:00
d52e9cd8c4 - Enable --with-system-ffi for non-standard architectures.
- SLE-12 builds nis.so as well.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=352
2023-03-29 10:23:12 +00:00
7e0f3cb088 - Enable --with-system-ffi for non-standard architectures.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=350
2023-03-08 21:18:31 +00:00
97104e51ec - SLE-12 builds nis.so as well.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=348
2023-03-06 15:35:17 +00:00
735f57103b SLE-12 builds nis.so as well.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=347
2023-03-06 14:44:35 +00:00
b60b8e8937 Create isascii() shim for missing str.isascii().
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=345
2023-03-02 15:36:10 +00:00
9f86e564da - Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=344
2023-03-01 22:01:21 +00:00
c21db0430f - Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=343
2023-03-01 22:00:56 +00:00
ea48fe2e7a Accepting request 1061583 from home:kukuk:branches:devel:languages:python:Factory
- Disable NIS for new products, it's deprecated and gets removed

- Disable NIS for new products, it's deprecated and gets removed

OBS-URL: https://build.opensuse.org/request/show/1061583
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=341
2023-01-27 16:14:53 +00:00
2a9d6402e8 - Add skip_unverified_test.patch because apparently switching off
SSL verification doesn't work on older SLE.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=339
2023-01-19 08:45:16 +00:00
6a9d569c25 - Restore python-2.7.9-sles-disable-verification-by-default.patch
for SLE-12.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=337
2022-11-22 20:56:11 +00:00
615a636d68 Adjust Patches
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=335
2022-11-10 14:35:05 +00:00
3f9f4e7cb7 - Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=334
2022-11-09 19:07:01 +00:00
eb3f10bd75 Accepting request 1003076 from home:bmwiedemann:branches:devel:languages:python:Factory
- Add bpo34990-2038-problem-compileall.patch making compileall.py
  compliant with year 2038 (bsc#1202666, gh#python/cpython#79171),
  backport of fix to Python 2.7.

OBS-URL: https://build.opensuse.org/request/show/1003076
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=332
2022-09-15 07:46:07 +00:00
Steve Kowalik
de85457a6c - Add patch CVE-2021-28861-double-slash-path.patch:
* BaseHTTPServer: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=330
2022-09-07 04:48:27 +00:00
9a59733bbe Fix the patch
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=328
2022-06-09 22:53:53 +00:00
d38335e738 Fix the patch to use Python 2-compatible unicode strings.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=327
2022-06-09 21:33:02 +00:00
da24c1af97 - Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=326
2022-06-09 16:47:44 +00:00
cadbcd01cd Accepting request 978856 from home:marxin:branches:devel:languages:python:Factory
- Filter out executable-stack error that is triggered for i586
  target.

OBS-URL: https://build.opensuse.org/request/show/978856
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=324
2022-05-24 08:29:21 +00:00
3edb04a7cd Accepting request 962755 from home:msmeissn:branches:devel:languages:python:Factory
- python-2.7.9-sles-disable-verification-by-default.patch: remove
  as it by default now always does strict enforcement anyway and it
  is 2022.

OBS-URL: https://build.opensuse.org/request/show/962755
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=322
2022-03-18 17:01:12 +00:00
2dad11ae4d - Recover again proper value of %python2_package_prefix
(bsc#1175619).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=320
2022-03-02 00:59:44 +00:00
f6d8c1bb6a Fix changelogs
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=319
2022-02-26 20:11:49 +00:00
dc8a4b385b - Update bundled pip wheel to the latest SLE version patched
against bsc#1186819 (CVE-2021-3572).
- Run pre_checkin.sh as well (so other than python-base
  changelogs are synced as well).

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=318
2022-02-26 12:44:02 +00:00
9442b9b6ab - BuildRequire rpm-build-python: The provider to inject python(abi)
has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=317
2022-02-18 11:02:04 +00:00
a2b1f34add - Older SLE versions should use old OpenSSL.
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python?expand=0&rev=316
2022-02-18 10:52:31 +00:00